Loading lesson

Threat vectors and attack surfaces

Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%) · Lesson 2 of 8

Lesson 2 of 8

Ask a tutor

Lesson 2 of 8 · Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%)

Threat vectors and attack surfaces

3 quick checks≈3% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Identify message-based vectors (email, SMS, RCS, instant messaging, collaboration tools) and image- and attachment-based vectors (QR codes, embedded content, macros, RTF and PDF files)
Identify browser-based vectors (extensions, JavaScript, cookies, session tokens, password managers) and network and remote-access vectors (RDP, VNC, VPN, infrastructure and virtualized devices)

0% read

Assess supply chain vectors: managed service providers, vendors, suppliers, logistics and SaaS providers

Reduce the attack surface created by open service ports, default credentials, unsupported software and IoT/OT devices such as cameras, sensors and printers

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account